Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/y6ZO6ni6NlZLwgRW4BonQEwJolo.cer
File: y6ZO6ni6NlZLwgRW4BonQEwJolo.cer (raw, json)
Hash identifier: USVL3i1zoq1FxHOOCGLGkLqNYwsYff/qAM4r1Gdb4OE=
Subject key identifier: CB:A6:4E:EA:78:BA:36:56:4B:C2:04:56:E0:1A:27:40:4C:09:A2:5A
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 3EED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAICOM/y6ZO6ni6NlZLwgRW4BonQEwJolo.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAICOM/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Thu 30 Oct 2025 07:57:22 +0000
Certificate not after: Sat 22 Aug 2026 08:14:28 +0000
Subordinate resources: AS: 63896
IP: 103.186.142.0/23
IP: 202.5.8.0/23
IP: 2400:71a0::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 06:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16109 (0x3eed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Oct 30 07:57:22 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=CBA64EEA78BA36564BC20456E01A27404C09A25A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:81:72:25:4d:2a:20:51:e4:a6:a1:f9:dc:13:
9a:96:5c:bd:24:51:02:cf:1a:36:b5:a0:3e:12:74:
bd:87:ef:c9:0d:44:68:cd:a3:86:6c:ac:b7:39:48:
39:d2:d8:27:f1:ba:af:a7:7f:01:5f:eb:4e:4e:b1:
44:c6:03:1c:e3:7d:65:46:f6:c7:77:9f:c6:d4:35:
25:9c:1e:45:23:c8:20:c6:c3:ea:cd:04:6c:82:a0:
aa:1a:6f:af:0f:ba:9b:70:33:ec:60:27:2f:5f:ea:
96:8b:7a:79:92:8f:1c:41:ec:b7:11:8f:32:ce:ea:
97:bf:f1:5c:43:f5:10:25:12:ba:66:b3:83:3b:af:
63:19:00:ec:e1:56:1c:3e:c9:b8:e4:75:a5:ee:e7:
19:a6:e0:f9:11:53:2f:79:48:be:87:9c:45:65:0d:
ab:f3:8e:40:aa:1a:2f:ff:98:4e:31:6e:06:a7:d4:
ed:1e:bc:ad:c0:e8:cb:4c:8d:16:6c:e8:3a:52:6c:
cf:f8:b0:55:f7:f4:7c:ed:3b:ca:1d:47:fe:03:9d:
56:82:0b:a3:0e:81:4e:26:26:9f:af:a4:ae:7a:df:
ed:89:84:74:d4:7f:4f:52:40:88:76:8f:49:40:00:
aa:e7:eb:80:c8:52:b8:9c:19:4d:95:f9:59:9a:38:
55:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A6:4E:EA:78:BA:36:56:4B:C2:04:56:E0:1A:27:40:4C:09:A2:5A
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAICOM/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAICOM/y6ZO6ni6NlZLwgRW4BonQEwJolo.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
63896
sbgp-ipAddrBlock: critical
IPv4:
103.186.142.0/23
202.5.8.0/23
IPv6:
2400:71a0::/32
Signature Algorithm: sha256WithRSAEncryption
12:e7:16:c3:1e:eb:3e:39:a0:03:04:05:dd:8b:30:37:82:c5:
af:9b:d6:cf:c6:4a:9d:f5:14:09:05:7e:d6:6c:f1:0b:ac:8f:
d6:04:c6:77:54:ba:7c:c3:96:2b:e2:56:f9:d8:d0:01:74:3c:
97:94:5c:2a:2d:e0:69:b2:b5:c8:e9:59:58:24:53:c2:3a:3a:
b3:55:cb:bd:90:32:73:bc:ac:d5:8f:ab:f2:cf:6f:8e:a3:52:
00:78:93:e8:5f:27:6e:0d:4f:fb:33:f0:15:4c:7b:15:ad:9b:
1a:33:8a:7d:d9:44:01:8c:1b:dc:a3:bd:40:56:b0:4c:f2:07:
94:31:9b:a9:07:de:7e:c5:ad:08:5d:89:77:13:5e:68:ee:44:
fe:4f:9a:7d:91:dd:7a:31:35:77:27:47:38:ce:6b:7f:e2:1d:
7d:ee:6c:13:2d:5e:96:ed:32:4c:2f:ff:71:61:99:51:e3:bd:
18:96:fa:46:1e:d4:9a:90:24:b2:47:50:4f:1c:22:ed:ee:38:
0a:54:e7:ca:4c:c2:eb:b0:2d:ac:05:12:49:74:05:c6:3f:66:
0d:24:a2:6a:3e:ef:75:c1:cb:9e:c5:ac:ef:31:59:5b:4b:fa:
ec:a3:ea:31:67:e3:04:65:5b:e4:1b:c9:72:69:df:bb:a8:b8:
b8:a1:85:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:41:09 2025 by rpki-client